UFO VPN claims zero-logs policy, leaks 20M user logs

Re:UFO VPN claims zero-logs policy, leaks 20M user logs by dcow on Saturday July 18, 2020 @01:19AM (#23879189)

What's the difference between a VPC and iptables? I agree that you shouldn't expose insecure services. But why do I need to introduce an entire private address space and cloud-managed SDN services to achieve that goal? If it weren't industry status quo, I'd almost call you a shill for the union of ops teams working to secure jobs for years to come. Almost.. (;

[ Parent | on HN ]

Re:UFO VPN claims zero-logs policy, leaks 20M user logs by llarsson on Saturday July 18, 2020 @01:38AM (#23879288)

I would think that the post you respond to either supposes a hosted service (you do not control the server and its iptables) or that it multiple layers of protection is good for something critical.

But yes, if it's your own server, everyone should remember that regular Linux features are darn powerful, too.

[ Parent | on HN ]

Re:UFO VPN claims zero-logs policy, leaks 20M user logs by mrweasel on Saturday July 18, 2020 @02:41AM (#23879548)

A VPC, with security groups, can be much easier, depending on how your instances are managed. You’re sure that all the indtances have the same rules and that the rules are always updated, even in if you use auto-scaling.

If you use some provisioning tool you can have the same thing with IPtables. But why are you on AWS if you don’t want to used the features Amazon provides?

[ Parent | on HN ]

Re:UFO VPN claims zero-logs policy, leaks 20M user logs by rantanplan on Saturday July 18, 2020 @10:53AM (#23881776)

Not directly comparable. You can use iptables on a EC2 instance inside a VPC.

VPC is more akin to a glorified virtual switch/bridge.

[ Parent | on HN ]